Exploiting XXE using external entities to retrieve files
Laboratorio de Portswigger sobre XXE
Justice-Reaper
Remote code execution via polyglot web shell upload
Laboratorio de Portswigger sobre File Upload
Web shell upload via obfuscated file extension
Laboratorio de Portswigger sobre File Upload
Web shell upload via extension blacklist bypass
Laboratorio de Portswigger sobre File Upload
Web shell upload via path traversal
Laboratorio de Portswigger sobre File Upload
File path traversal, validation of file extension with null byte bypass
Laboratorio de Portswigger sobre Path Traversal
File path traversal, validation of start of path
Laboratorio de Portswigger sobre Path Traversal
File path traversal, traversal sequences stripped with superfluous URL-decode
Laboratorio de Portswigger sobre Path Traversal
File path traversal, traversal sequences stripped non-recursively
Laboratorio de Portswigger sobre Path Traversal
File path traversal, traversal sequences blocked with absolute path bypass
Laboratorio de Portswigger sobre Path Traversal